Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/bec5781c-5f94-37c7-804d-70a0d728a375.roa
File: bec5781c-5f94-37c7-804d-70a0d728a375.roa (raw, json)
Hash identifier: EAZ5PpvorKfHIPV8gInC7E1469z55BL02RqhmvRWYyU=
Subject key identifier: BC:36:86:63:4E:1D:AC:10:50:0A:DD:F5:44:7F:D9:55:20:3F:B9:9F
Certificate issuer: /CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Certificate serial: 010D0C9F43285841106901323FB4D8A6106C9588
Authority key identifier: 08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/bec5781c-5f94-37c7-804d-70a0d728a375.roa
Signing time: Tue 28 Feb 2023 18:57:57 +0000
ROA not before: Tue 28 Feb 2023 18:57:57 +0000
ROA not after: Mon 02 Jun 2025 04:00:00 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:10:69:01:32:3f:b4:d8:a6:10:6c:95:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Validity
Not Before: Feb 28 18:57:57 2023 GMT
Not After : Jun 2 04:00:00 2025 GMT
Subject: CN=3eabdace-8ee7-4283-8758-de405f3e974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:13:17:f9:96:52:cb:18:b7:6d:54:a3:bf:
4b:4d:34:57:e9:81:66:62:7c:b3:1e:0e:a1:cc:f9:
60:3a:a8:d6:3f:71:eb:f9:b1:fc:c2:49:ad:a8:7a:
86:61:ca:c3:32:e3:5e:1b:65:10:0e:d2:63:72:37:
eb:6f:30:08:5e:4c:66:cd:2c:4c:08:77:68:9b:8d:
56:79:f6:81:2c:9b:b3:1f:fa:cd:bc:48:e7:56:69:
3f:73:14:86:e3:a4:88:0d:58:62:82:53:9a:0f:a4:
d1:2b:4d:f8:8b:d9:30:0a:22:4f:76:c6:7e:2d:a5:
34:06:2a:8f:de:e8:31:6f:1b:c8:ea:94:cf:7f:f2:
e8:86:41:a9:c7:9f:06:56:79:c1:52:14:09:6b:8c:
7b:dd:e0:9b:2a:b0:dc:dd:8d:f3:de:2d:de:63:29:
0f:30:26:05:d8:69:05:7f:96:58:a8:d9:eb:50:f3:
71:83:ed:16:16:b3:49:0a:09:08:3a:54:34:32:2d:
a3:82:c0:99:dc:0e:3f:cf:56:59:e8:d9:9d:d8:5d:
18:fc:6e:25:92:4e:62:fc:c5:f0:3f:d8:c5:ad:6a:
70:71:49:01:dc:f6:b6:00:17:d8:9f:89:41:26:25:
1d:db:ff:80:45:8a:53:d8:8c:d0:94:fb:e4:df:aa:
cc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:86:63:4E:1D:AC:10:50:0A:DD:F5:44:7F:D9:55:20:3F:B9:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/bec5781c-5f94-37c7-804d-70a0d728a375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.crl
X509v3 Authority Key Identifier:
keyid:08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:b0:14:e1:1c:da:0f:59:0a:17:04:31:01:20:f2:9a:87:07:
75:91:a7:ae:21:62:65:ac:5d:63:a4:a1:20:c0:1d:c4:91:f1:
50:eb:3b:0a:22:25:00:e7:14:6a:3b:50:ce:30:75:c6:0f:4e:
5c:86:13:b7:d7:b7:06:fa:16:1e:e2:26:09:96:77:29:d8:60:
a2:1c:77:22:77:b0:3c:03:37:92:a4:16:ec:e2:50:fe:61:0e:
0e:0e:7a:a5:17:82:1b:62:f5:58:d3:ab:8c:f9:e3:90:25:51:
07:2f:2e:54:45:02:43:29:d0:80:92:56:79:b9:16:d1:08:a2:
9d:44:f8:9c:37:74:a1:30:be:30:50:09:94:bf:3b:8f:22:2f:
53:e7:7b:85:99:d6:91:10:0c:fc:8e:b3:83:c2:4f:a2:82:3a:
ba:a7:bd:16:0f:b6:df:8d:e4:4e:93:43:65:4d:44:8b:0b:41:
39:43:97:1a:fc:90:40:cb:b1:1b:87:51:5c:70:29:8a:af:8b:
c8:6a:ce:0b:2a:60:bc:fa:2e:ea:85:46:11:a9:07:32:70:20:
e4:2d:a9:e9:d6:09:03:af:70:bb:0b:d9:2a:7d:dc:d5:0f:9b:
a2:11:5e:b3:e9:bb:da:76:2b:2e:8f:9e:29:d4:d0:55:43:4b:
5a:1a:0f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:13 2025 by rpki-client